Semgrep rule ported - rsa-padding-set-scala - Scala by ESS ENN

rules/scala/security/rsa-padding-set-scala.yml

@@ -0,0 +1,15 @@
+id: rsa-padding-set-scala
+language: scala
+severity: warning
+message: >-
+ Usage of RSA without OAEP (Optimal Asymmetric Encryption Padding) may.
+note: >-
+ [CWE-780] Use of RSA Algorithm without OAEP
+ [REFERENCES]
+ - https://owasp.org/Top10/A02_2021-Cryptographic_Failures
+rule:
+ any:
+ - pattern: $CIPHER.getInstance($MODE)
+constraints:
+ MODE:
+ regex: ".*RSA/.*/NoPadding.*"

tests/__snapshots__/rsa-padding-set-scala-snapshot.yml

@@ -0,0 +1,2 @@
+id: rsa-padding-set-scala
+snapshots: {}

tests/scala/rsa-padding-set-scala-test.yml

@@ -0,0 +1,9 @@
+id: rsa-padding-set-scala
+valid:
+ - |
+ Cipher.getInstance("AES/CBC/PKCS5Padding");
+ Cipher.getInstance("DES/ECB/PKCS5Padding");
+ Cipher cipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
+invalid:
+ - |
+ Cipher.getInstance("RSA/ECB/NoPadding")